aboutsummaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec/ipsec_sa.c
AgeCommit message (Expand)AuthorFilesLines
2022-09-14ipsec: make chacha20-poly1305 available via APIVladimir Ratnikov1-1/+2
2022-08-19ipsec: enable UDP encap for IPv6 ESP tun protectMatthew Smith1-2/+4
2021-09-29ipsec: Record the number of packets lost from an SANeale Ranns1-0/+7
2021-06-30ipsec: Derive the TUNNEL_V6 flag from the configured address typesNeale Ranns1-0/+4
2021-03-05ipsec: Support async mode per-SANeale Ranns1-1/+11
2021-02-26ipsec: move the IPSec SA pool out of ipsec_mainNeale Ranns1-23/+19
2021-02-10ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-72/+26
2021-02-09Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy"Matthew Smith1-26/+72
2021-02-08ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-72/+26
2021-02-05ipsec: add support for AES CTRBenoît Ganne1-0/+5
2021-02-04ipsec: one thread index per-SANeale Ranns1-2/+1
2020-12-14misc: move to new pool_foreach macrosDamjan Marion1-3/+3
2020-11-02ipsec: Tunnel SA DSCP behaviourNeale Ranns1-2/+9
2020-10-21misc: minimize dependencies on udp.hFlorin Coras1-1/+1
2020-09-07ipsec: fix padding/alignment for native IPsec encryptionChristian Hopps1-2/+2
2020-05-05ipsec: User can choose the UDP source portNeale Ranns1-9/+14
2020-04-30crypto: introduce async crypto infraFan Zhang1-3/+61
2020-03-21ikev2: add support for custom ipsec-over-udp portFilip Tehlar1-3/+12
2019-12-17ipsec: bind an SA to a workerNeale Ranns1-0/+2
2019-11-08ipsec: remove dedicated IPSec tunnelsNeale Ranns1-0/+14
2019-10-22ikev2: fix GCM cipherFilip Tehlar1-9/+17
2019-07-19fib: FIB Entry trackingNeale Ranns1-10/+6
2019-07-12ipsec: Reference count the SAsNeale Ranns1-83/+65
2019-06-18ipsec: ipsec-tun protectNeale Ranns1-2/+23
2019-06-17ipsec: One DPO per SANeale Ranns1-10/+9
2019-06-07ipsec: remove the set_key APINeale Ranns1-46/+0
2019-06-05IPSEC: some CLI fixesNeale Ranns1-2/+8
2019-06-02IPSec: memcpy of integ key borkNeale Ranns1-1/+1
2019-04-30crypto: enforce per-alg crypto key lengthBenoît Ganne1-0/+5
2019-04-25IPSEC; dpdk backend for tunnel interface encryptionNeale Ranns1-1/+1
2019-04-25crypto: improve key handlingDamjan Marion1-0/+18
2019-04-16IPSEC: support GCM in ESPNeale Ranns1-2/+9
2019-04-10IPSEC: for each engine and algorithm testsNeale Ranns1-1/+1
2019-04-07crypto: add support for AEAD and AES-GCMDamjan Marion1-3/+3
2019-04-04ipsec: trunc_size -> icv_sizeDamjan Marion1-2/+2
2019-04-02IPSEC: tunnel scaling - don't stack the inbould SANeale Ranns1-13/+3
2019-03-29ipsec: esp-decrypt reworkDamjan Marion1-0/+1
2019-03-28ipsec: USE_EXTENDED_SEQ_NUM -> USE_ESNDamjan Marion1-2/+2
2019-03-27ipsec: compress ipsec_sa_t so data used by dataplane code fits in cachelineDamjan Marion1-19/+21
2019-03-26ipsec: esp-encrypt reworkDamjan Marion1-0/+43
2019-03-20ipsec: keep crypto data inside SADamjan Marion1-2/+22
2019-02-18IPSEC: move SA counters into the stats segmentNeale Ranns1-0/+14
2019-02-14ipsec: memory leak fixupKingwel Xie1-1/+4
2019-02-13IPSEC: restack SAs on backend changeNeale Ranns1-13/+26
2019-02-07IPSEC: no second lookup after tunnel encapNeale Ranns1-38/+236
2019-02-05IPSEC: SPD counters in the stats sgementNeale Ranns1-10/+7
2019-02-01IPSEC: minor refactorNeale Ranns1-0/+174